ALL POSTS

Key Findings Critical heap buffer overflow in FreeRDP Windows client (CVE-2026-44421) allows remote code execution when victim connects to malicious server Public proof-of-concept exploit code now available, significantly lowering attack complexity for threat actors Affects FreeRDP versions 3.28.0 and older, specifically the unmaintained wfreerdp component Related vulnerabilities CVE-2026-44422 and CVE-2026-40033 indicate systemic protocol implementation weaknesses Thousands

Key Findings NGINX vulnerability CVE-2026-42945 (CVSS 9.2) is actively exploited in the wild days after public disclosure Heap buffer overflow in ngx_http_rewrite_module affects NGINX versions 0.6.27 through 1.30.0 Flaw can crash worker processes or enable remote code execution on systems with ASLR disabled Exploitation requires specific NGINX configuration knowledge and crafted HTTP requests VulnCheck detected weaponized exploitation attempts against honeypot networks Two cr